This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40264.roa
File:                     AS40264.roa (raw, json)
Hash identifier:          A8FpuGrjGiXzdSin/AcTaNp6mVRImZ8lSvckckdlYIA=
Subject key identifier:   48:33:04:1B:93:46:49:35:DC:3C:E7:39:B3:AC:CC:14:3D:2F:82:B4
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       4AB72E71E43A69A1DF7038671306CD0DBDC515A2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40264.roa
Signing time:             Thu 15 Jan 2026 12:55:33 +0000
ROA not before:           Thu 15 Jan 2026 12:50:33 +0000
ROA not after:            Thu 14 Jan 2027 12:55:33 +0000
asID:                     40264
IP address blocks:        82.27.4.0/22 maxlen: 22
                          82.27.12.0/22 maxlen: 22
                          82.29.16.0/22 maxlen: 22
                          82.29.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b7:2e:71:e4:3a:69:a1:df:70:38:67:13:06:cd:0d:bd:c5:15:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 15 12:50:33 2026 GMT
            Not After : Jan 14 12:55:33 2027 GMT
        Subject: CN=4833041B93464935DC3CE739B3ACCC143D2F82B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:e4:3b:45:e6:71:c4:6c:b0:04:f7:42:c0:
                    da:20:2c:26:68:b3:7f:9f:3b:24:c7:be:14:a2:24:
                    73:58:cc:a6:b7:e5:4e:0c:9b:b2:bf:55:bb:98:b3:
                    eb:8c:14:90:e7:64:70:a4:f5:ae:b4:65:45:7f:8f:
                    d4:de:8e:de:48:71:9d:bf:a7:9e:dd:6d:06:75:c5:
                    80:b0:1b:d1:48:9d:3c:2d:ae:b5:e4:44:a6:0c:e8:
                    95:8f:67:07:aa:8e:ec:6e:32:7d:86:3f:54:68:33:
                    e8:ec:89:b4:10:46:35:c7:77:ff:9b:c3:6b:35:c7:
                    2b:15:9e:f8:7b:4e:49:52:de:7c:c3:3c:54:28:a8:
                    45:d0:9d:46:20:40:5e:0e:47:d9:0f:0b:8d:bc:dc:
                    1f:89:13:64:2a:f7:ba:9f:48:8c:ed:8a:cd:c8:ed:
                    f3:f8:0d:1e:07:a4:f7:c5:cd:5a:ab:2c:2c:70:80:
                    5a:59:ba:d9:5a:ea:f3:52:3f:ac:49:e3:93:fe:c1:
                    f2:7a:83:1f:46:13:38:ae:6d:6e:5f:60:87:a4:f8:
                    35:29:05:de:d4:3f:47:cd:8c:27:87:af:f2:00:82:
                    2f:6f:bb:44:b8:3e:49:68:ee:b3:61:0b:1c:95:f0:
                    ac:55:3b:46:16:40:96:e1:0b:85:25:ad:94:2f:16:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:33:04:1B:93:46:49:35:DC:3C:E7:39:B3:AC:CC:14:3D:2F:82:B4
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS40264.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.27.4.0/22
                  82.27.12.0/22
                  82.29.16.0/22
                  82.29.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:9b:20:dc:df:09:75:26:62:f8:4d:74:5d:f3:a9:e1:24:
         5e:d4:a3:91:5c:a2:b1:f9:ed:73:d8:b6:c9:2c:87:23:7b:06:
         c7:45:37:e3:97:65:d4:47:a7:38:a5:6a:09:7e:ea:10:12:d8:
         a5:11:58:b8:31:17:3a:86:b4:c8:4a:d4:6c:98:55:2c:a7:53:
         53:54:56:c4:32:fd:41:4b:fe:c4:4a:c0:e5:94:82:22:9e:89:
         65:cd:55:22:7b:9b:36:18:d5:48:1b:da:99:45:4a:43:d2:20:
         2a:a0:d4:ae:ff:7e:0e:d7:b6:cf:98:03:56:b2:54:f7:5f:9d:
         e9:07:34:ed:20:60:2f:26:52:79:74:03:47:0b:37:ef:16:5b:
         94:3c:a7:31:5e:9c:cd:b5:b8:fb:68:f3:32:46:f7:7d:65:a6:
         cc:7c:9c:04:31:d5:f9:31:2e:a4:9e:4f:03:43:32:3f:02:72:
         a6:47:ba:7e:e1:18:93:4c:4f:06:ab:4e:47:93:5f:f4:40:f2:
         67:d4:16:22:63:d1:55:76:6b:89:06:73:d0:10:02:4b:b2:72:
         fc:f2:b1:e0:66:4f:c7:b1:aa:3c:d9:6b:30:3a:25:77:8d:25:
         fa:6f:bd:02:6e:40:cc:c7:57:62:57:34:c2:7e:58:36:bd:71:
         1f:0f:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:09 2026 by rpki-client